Accepting request 1130178 from Base:System

- udev: Tighten permissions for DRM render nodes (bsc#1217118). Note that this
  implicitly enables `uaccess`, so any logged-in user still gets access
  regardless of group membership. Some use cases, e.g. remote access via ssh,
  might require you to add the desired user to the `render` group.
  See:
  https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/3S3HAWVODHC2FQI4E76IFGCSRVRJ63KG/

OBS-URL: https://build.opensuse.org/request/show/1130178
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=408
This commit is contained in:
Dominique Leuenberger 2023-12-02 16:12:31 +00:00 committed by Git OBS Bridge
commit 50bd5b4c78
2 changed files with 12 additions and 0 deletions

View File

@ -1,3 +1,14 @@
-------------------------------------------------------------------
Tue Nov 21 13:57:52 UTC 2023 - Wolfgang Frisch <wolfgang.frisch@suse.com>
- udev: Tighten permissions for DRM render nodes (bsc#1217118). Note that this
implicitly enables `uaccess`, so any logged-in user still gets access
regardless of group membership. Some use cases, e.g. remote access via ssh,
might require you to add the desired user to the `render` group.
See:
https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/3S3HAWVODHC2FQI4E76IFGCSRVRJ63KG/
-------------------------------------------------------------------
Thu Nov 2 08:56:57 UTC 2023 - Franck Bui <fbui@suse.com>

View File

@ -721,6 +721,7 @@ export CFLAGS="%{optflags} -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2"
-Dclock-valid-range-usec-max=946728000000000 \
-Dadm-group=false \
-Dwheel-group=false \
-Dgroup-render-mode=0660 \
-Dutmp=false \
-Ddefault-hierarchy=unified \
-Ddefault-kill-user-processes=false \